CVE-2024-43397

Publication date

2024-08-20 14:50:01

Family

GitHub_M

State

PUBLISHED

Description

Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that allows users to craft specific requests to bypass permission checks. This exploit enables them to modify a namespace without the necessary permissions. The issue was addressed with an input parameter check which was released in version 2.3.0.